CaroMont employee loses patient information in theft

CaroMont Health

By Michael Barrett

Published: Wednesday, January 22, 2014 at 11:51 AM.

Melissa Huggins said respiratory problems related to pneumonia took her to CaroMont Regional Medical Center last year. But she doesn’t understand why a paper record concerning anything about that visit should’ve been in a hospital employee’s vehicle when it was broken into last month in Dallas. She’s since learned there are 190 other patients likely wondering the same thing.

“I didn’t know a record like that would even leave the hospital,” said Huggins, who lives in the Crouse community. “I don’t see why (a hospital employee) would have records like that in a car.”

CaroMont spokeswoman Dallas Paddon said there are instances when health-care employees will transport patient information by car, but they are expected to take proper precautions to ensure the security of the information. That can be made more difficult when a vehicle break-in leads to the disclosure, Paddon said.

Huggins received a letter from CaroMont Health last week informing her that personal information had been stolen. It stated that a “census report” with her protected health information had been stolen out of an employee’s vehicle. “The information included your name, date of birth, medical record number and reason for visit,” the letter said.

The records were stolen in a vehicle break-in Dec. 16, “during a stop on (the employee’s) commute to work,” said Horseman. “Upon learning of the unauthorized disclosure, we conducted a thorough investigation with the staff person and appropriate disciplinary actions were taken.”

The employee filed a report with the Dallas Police Department, she said. “Because the report did not include Social Security numbers or financial information, we do not believe that any adverse actions will result from this disclosure,” said Horseman. “We have alerted all affected individuals as required by federal regulations, and have representatives available should they have concerns or questions. “

Melissa Huggins said respiratory problems related to pneumonia took her to CaroMont Regional Medical Center last year. But she doesn’t understand why a paper record concerning anything about that visit should’ve been in a hospital employee’s vehicle when it was broken into last month in Dallas. She’s since learned there are 190 other patients likely wondering the same thing.

“I didn’t know a record like that would even leave the hospital,” said Huggins, who lives in the Crouse community. “I don’t see why (a hospital employee) would have records like that in a car.”

CaroMont spokeswoman Dallas Paddon said there are instances when health-care employees will transport patient information by car, but they are expected to take proper precautions to ensure the security of the information. That can be made more difficult when a vehicle break-in leads to the disclosure, Paddon said.

Huggins received a letter from CaroMont Health last week informing her that personal information had been stolen. It stated that a “census report” with her protected health information had been stolen out of an employee’s vehicle. “The information included your name, date of birth, medical record number and reason for visit,” the letter said.

The records were stolen in a vehicle break-in Dec. 16, “during a stop on (the employee’s) commute to work,” said Horseman. “Upon learning of the unauthorized disclosure, we conducted a thorough investigation with the staff person and appropriate disciplinary actions were taken.”

The employee filed a report with the Dallas Police Department, she said. “Because the report did not include Social Security numbers or financial information, we do not believe that any adverse actions will result from this disclosure,” said Horseman. “We have alerted all affected individuals as required by federal regulations, and have representatives available should they have concerns or questions. “

Additionally, CaroMont Health is taking appropriate action to prevent a reoccurrence, she said, “by re-educating our staff to ensure that we continue to use and disclose patient information as permitted by law and in accordance with our Notice of Privacy Practices,” Horseman said.

Dallas Police Chief Gary Buckner said his department investigated only one vehicle break-in Dec. 16. It involved someone using a pry tool or other device to break into a truck parked at a residence on Summey Farm Drive, sometime before 8 a.m. that morning. The police report mentions only that a set of golf clubs, a range finder and a laptop were stolen from the vehicle, but nothing else.

Paddon referred to the document that was stolen as a “singular, printed report.” The letter Huggins received also warned that her financial reputation may be at risk, though it didn’t specify how. It provided direct contact numbers for Equifax, Experian and Trans Union — the three major credit bureaus.

“We encourage you to periodically monitor your credit reports on a regular basis for any irregular activities,” the letter stated. “If you have further concerns about the potential misuse of your information, we will be glad to offer credit monitoring services at no cost to you.”

Horseman said CaroMont Health values the privacy of all patient medical information. “We view the protection of patient privacy as an essential component of our mission to provide exceptional health care to the communities we serve, and we take that responsibility very seriously,” she said.

In an unrelated incident last August, CaroMont Health discovered that patient health information from CaroMont Medical Group was transmitted by an unsecure email. The email contained the protected health information of 1,310 individuals, including their names, dates of birth, addresses, telephone numbers, medical record numbers, diagnoses, last dates of service, medications and insurance company names. It also included the Medicare numbers for two patients.

Huggins remains wary of any adverse effects she may see as a result of her information falling into the wrong hands. “I don’t know what I’m up against here,” she said. “I don’t have a clue.”

You can reach Michael Barrett at 704-869-1826 or twitter.com/GazetteMike.